Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: kcc//vldCmG5hzg9pCWm/1fXS6oqaxLuyJeyyq1os8k=
Subject key identifier: 94:46:35:E0:D2:22:F6:DC:E4:15:91:CE:3D:14:9A:8E:CD:43:FE:49
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 01A0EA771197F35452525A33253AF1832DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0EDB
Signing time: Tue 29 Sep 2026 00:01:06 +0000
Manifest this update: Tue 29 Sep 2026 00:01:06 +0000
Manifest next update: Wed 30 Sep 2026 00:01:06 +0000
Files and hashes: 1: C-EukaWXr2kXZCbaHLOBLQ9m5U4.roa (hash: 5oNWWP9JATtZbQ9s/+0aWJ+9EOmStquNZlSy9y4pgxk=)
2: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: 3e/3faKR6qWu/Zx3094RpqX5z8u/g1gEWdn8Cv0Cr6E=)
3: HNkiKtIomNoYZ41hjRiwhD40-iE.roa (hash: 7gzZ4thPtC/HiasIMZqtWoVWvXNMp0vHFfmmHuAr/UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:11:97:f3:54:52:52:5a:33:25:3a:f1:83:2d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Sep 29 00:01:06 2026 GMT
Not After : Sep 30 00:01:06 2026 GMT
Subject: CN=944635e0d222f6dce41591ce3d149a8ecd43fe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:ff:25:7d:94:22:5f:62:54:20:07:5d:3b:
25:7f:cf:7b:34:ea:b4:fc:9e:2b:68:46:b0:00:4f:
31:27:0d:e7:94:c8:36:22:65:41:71:a5:ac:1a:92:
82:d7:da:87:36:96:b3:ad:7d:cc:c0:d1:a4:32:40:
bb:c6:33:2e:29:63:25:76:f2:a8:ce:93:31:46:c5:
f7:a7:28:ad:4d:c7:0b:8e:00:ba:8f:c7:5f:fe:f1:
6d:a5:4e:dd:5e:b8:3c:02:89:47:54:4a:2f:2a:97:
f0:1b:4f:15:58:2b:11:5b:3f:60:15:58:2f:17:7d:
76:a5:73:a0:15:78:8a:10:14:f6:2b:71:57:10:32:
f3:ea:2a:25:58:30:dd:7f:10:a3:55:f3:54:b2:1b:
51:b3:57:c9:6b:1b:d2:34:a1:13:72:bb:1c:85:ff:
b4:4d:45:de:73:aa:22:bd:61:e8:f6:12:5b:e0:5a:
d9:29:4b:44:5f:90:55:22:27:b1:ac:90:28:c7:10:
2c:42:e3:49:1f:7a:37:de:00:d9:cc:a9:89:4e:ec:
cc:69:46:49:dc:fb:c5:ee:72:3e:a4:89:46:e7:3f:
aa:71:d3:8c:ad:29:fa:6b:27:14:2a:9d:4c:e3:d0:
b5:d1:80:a1:24:db:cd:80:2e:eb:d2:f3:7a:a0:6a:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:46:35:E0:D2:22:F6:DC:E4:15:91:CE:3D:14:9A:8E:CD:43:FE:49
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:88:8d:57:96:9b:80:4f:4b:b0:c3:b2:01:82:c7:3e:f0:29:
c3:7f:ed:aa:46:55:84:c2:39:01:7a:f4:4a:c1:a8:e2:59:d1:
b3:78:91:a3:9e:ef:f8:af:98:fc:fc:e7:e0:40:ab:bc:dc:04:
99:e0:c9:ab:bc:44:c5:1e:19:df:e1:b0:87:b2:da:93:92:e4:
ae:3e:7a:0b:72:36:fc:57:64:c1:7d:fe:25:8c:1e:31:d1:90:
37:20:b5:7f:49:cb:64:25:f8:4c:ab:5f:c9:8e:09:5b:3b:08:
4e:e5:9b:35:71:ea:5c:4d:84:84:e4:ff:7c:92:d6:70:ed:78:
8f:a2:fd:c2:6f:de:81:bd:ef:f6:6c:24:ac:06:7f:71:41:7d:
5e:ea:cf:d6:02:14:9d:c5:e7:a1:29:39:f4:15:90:eb:40:d4:
fd:3c:bc:62:8c:47:9b:48:b6:51:c0:b9:e8:45:7a:fb:e8:95:
dd:b0:27:cb:b7:72:17:1c:22:84:d0:46:1f:cd:37:d6:88:bd:
ec:3b:96:10:7d:f5:6c:b3:8d:0c:96:f0:74:4c:36:27:34:dc:
de:44:84:6b:91:2b:4c:d5:9b:6b:3f:e6:cd:3b:f7:7f:90:12:
63:b1:3b:e0:9d:4c:4b:da:44:8e:89:31:88:46:a1:27:97:7f:
e6:88:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:52:08 2026 by rpki-client